SAS 70/SSAE 16* Engagements

In today's competitive marketplace, third-party service organizations are now expected to have adequate controls and safeguards when they host, process or account for their customers' data and assets. As a result, SAS 70/SSAE 16 service auditor’s reports are being used for a multitude of purposes, including:

  • as market differentiators to provide assurance that they are adequately satisfying their clients’ business control objectives

  • as a benchmark from which they can monitor the ongoing acceptability of their controls and risk management and internal audit activities

  • as tools for companies going public to capture valuable due diligence information

EKS&H's risk advisory professionals guide clients through the SAS 70 process, offering Type 1 and Type 2 service auditor’s reports, as well as SAS 70/SSAE 16 readiness assessments designed to prepare clients for the more in-depth SAS 70 audit. This assessment offers procedures, controls and documentation services and deliverables.

EKS&H adds value to every SAS 70/SSAE 16 audit by offering:

  • a risk-based approach to control evaluation by testing only relevant, key controls

  • a team with the extensive IT experience necessary to address IT application controls simultaneously with manual

*SAS 70 will be superseded by SSAE 16 for reporting periods on or after June 15, 2011. Earlier implementation is permitted.